@7365admin1/layer-common 4.35.1-staging.384 → 4.36.0

package/composables/useHidAmico.ts

@@ -28,22 +28,6 @@ export type HidReaderPayload = {
   lastCallbackType?: string;
 };
 
-export type HidProfileQr = {
-  readerId: string;
-  userId: string;
-  memberId: string;
-  hidUserId: string;
-  registration: string;
-  readerName: string;
-  portalName: string;
-  qrEnabled: boolean;
-  issued: boolean;
-  qrValue: string;
-  issuedAt: string;
-  /** null when the permission lookup itself failed, so "unknown" stays distinct from "no". */
-  assigned: boolean | null;
-};
-
 type HidIdentityPayload = {
   site?: string;
   hidUserId?: string | number;
@@ -155,28 +139,6 @@ export type HidSipAccountData = {
   provisionedAt: string;
 };
 
-/** One row of the site's SIP account list - who owns the extension, never its password. */
-export type HidSipAccountListItem = {
-  _id: string;
-  userId: string;
-  name: string;
-  email: string;
-  /**
-   * What the owner is called after their name on the contact list: their
-   * "Blk 1/Level 1/Unit 1" when they live here, and their membership type -
-   * "Security Agency" - when they do not. "" only when the site knows neither.
-   *
-   * Optional because an API still on the `@7365admin1/core` release that
-   * predates it answers without the field; the contact picker falls back to the
-   * bare name rather than showing a dangling separator.
-   */
-  unitLabel?: string;
-  extension: string;
-  username: string;
-  status: string;
-  provisionedAt: string;
-};
-
 /**
  * True only for the specific validation error an API that predates core #1878
  * returns when the discover body carries `site`. Deliberately narrow: after
@@ -204,36 +166,6 @@ export default function useHidAmico() {
     });
   }
 
-  /**
-   * The signed-in member's own QR code on one reader.
-   *
-   * No user id in the path: the server takes the caller from the session, so
-   * these cannot be pointed at somebody else. `assigned` in the response says
-   * whether the HID permissions screen actually admits this member to the
-   * reader - issuing a code does not grant access, and the screen has to be
-   * able to say so.
-   */
-  function getProfileQr(readerId: string) {
-    return useNuxtApp().$api<{ data: HidProfileQr }>(
-      `${basePath}/readers/${readerId}/profile-qr`,
-      { method: "GET" },
-    );
-  }
-
-  function issueProfileQr(readerId: string) {
-    return useNuxtApp().$api<{ data: HidProfileQr }>(
-      `${basePath}/readers/${readerId}/profile-qr`,
-      { method: "POST" },
-    );
-  }
-
-  function deleteProfileQr(readerId: string) {
-    return useNuxtApp().$api<{ data: HidProfileQr }>(
-      `${basePath}/readers/${readerId}/profile-qr`,
-      { method: "DELETE" },
-    );
-  }
-
   function createReader(payload: HidReaderPayload) {
     return useNuxtApp().$api<HidApiRecord>(`${basePath}/readers`, {
       method: "POST",
@@ -325,36 +257,6 @@ export default function useHidAmico() {
     });
   }
 
-  /**
-   * Which credentials a reader accepts at the door.
-   *
-   * Separate from `setReaderConfiguration` on purpose. That one is the generic
-   * configuration endpoint, gated by an allowlist of writable objects; this is
-   * a dedicated route that validates the four methods against the reader's own
-   * `capabilities` and confirms the write by reading the device back, so a
-   * refusal here names the credential the hardware would not take.
-   */
-  function setReaderIdentificationMethods(readerId: string, payload: HidApiRecord) {
-    return useNuxtApp().$api<HidApiRecord>(
-      `${basePath}/readers/${readerId}/identification-methods`,
-      { method: "PUT", body: payload },
-    );
-  }
-
-  /**
-   * Put a reader back to the settings iService holds for it.
-   *
-   * A POST rather than a GET because it WRITES: reading the reader's
-   * configuration is only the first half, and anything that drifted is
-   * re-applied before this returns.
-   */
-  function reconcileReaderIdentificationMethods(readerId: string) {
-    return useNuxtApp().$api<HidApiRecord>(
-      `${basePath}/readers/${readerId}/identification-methods/reconcile`,
-      { method: "POST" },
-    );
-  }
-
   function getIdentities(readerId: string, query: HidApiRecord = {}) {
     return useNuxtApp().$api<HidApiRecord>(`${basePath}/readers/${readerId}/identities`, {
       method: "GET",
@@ -512,27 +414,6 @@ export default function useHidAmico() {
     );
   }
 
-  function getUserPasswordStatus(readerId: string, hidUserId: string | number) {
-    return useNuxtApp().$api<HidApiRecord>(
-      `${basePath}/readers/${readerId}/users/${hidUserId}/password`,
-      { method: "GET" },
-    );
-  }
-
-  function setUserPassword(readerId: string, hidUserId: string | number, password: string) {
-    return useNuxtApp().$api<HidApiRecord>(
-      `${basePath}/readers/${readerId}/users/${hidUserId}/password`,
-      { method: "PUT", body: { password } },
-    );
-  }
-
-  function deleteUserPassword(readerId: string, hidUserId: string | number) {
-    return useNuxtApp().$api<HidApiRecord>(
-      `${basePath}/readers/${readerId}/users/${hidUserId}/password`,
-      { method: "DELETE" },
-    );
-  }
-
   function deleteUserPin(readerId: string, hidUserId: string | number) {
     return useNuxtApp().$api<{ data: { pinEnrolled: boolean } }>(
       `${basePath}/readers/${readerId}/users/${hidUserId}/pin`,
@@ -593,36 +474,6 @@ export default function useHidAmico() {
     );
   }
 
-  function getSipAccounts(siteId: string, orgId: string) {
-    return useNuxtApp().$api<{ data: HidSipAccountListItem[] }>(
-      `${basePath}/sites/${siteId}/intercom/sip-accounts`,
-      { method: "GET", query: { orgId } },
-    );
-  }
-
-  /**
-   * Wake the resident's phone for a call the web phone has just placed.
-   *
-   * The SIP INVITE is the call and travels over the WebSocket, not through the
-   * API; this only rings the resident's mobile so somebody is there to answer
-   * it. It is therefore fired after the INVITE and never awaited in a way that
-   * could fail the call — see `startWebCall` in `HidIntercomManagement.vue`.
-   *
-   * `notified: false` with a reason is a normal response, not an error: staff
-   * extensions and external SIP addresses have no resident behind them.
-   */
-  function notifyIntercomCall(
-    siteId: string,
-    payload: { orgId: string; destination: string; callId: string; readerId?: string },
-  ) {
-    return useNuxtApp().$api<{
-      data: { notified: boolean; delivered?: number; reason?: string };
-    }>(
-      `${basePath}/sites/${siteId}/intercom/notify-call`,
-      { method: "POST", body: payload },
-    );
-  }
-
   function getPermissionCandidates(
     siteId: string,
     query: {
@@ -654,9 +505,6 @@ export default function useHidAmico() {
 
   return {
     getReaders,
-    getProfileQr,
-    issueProfileQr,
-    deleteProfileQr,
     discoverReader,
     createReader,
     updateReader,
@@ -671,8 +519,6 @@ export default function useHidAmico() {
     issueVisitorQr,
     getReaderConfiguration,
     setReaderConfiguration,
-    setReaderIdentificationMethods,
-    reconcileReaderIdentificationMethods,
     getLogs,
     setUserImage,
     deleteUserImage,
@@ -684,9 +530,6 @@ export default function useHidAmico() {
     getUserPinStatus,
     setUserPin,
     deleteUserPin,
-    getUserPasswordStatus,
-    setUserPassword,
-    deleteUserPassword,
     getIdentities,
     getReaderUsers,
     getReaderAccessLogs,
@@ -697,8 +540,6 @@ export default function useHidAmico() {
     makeIntercomCall,
     finalizeIntercomCall,
     ensureSipAccount,
-    getSipAccounts,
-    notifyIntercomCall,
     getSitePermissions,
     getPermissionCandidates,
     updateSitePermissions,

package/composables/useHidNavigation.ts

@@ -46,33 +46,9 @@ export default function useHidNavigation() {
           },
         },
         {
-          // "HID Reader Users" now points at `access-mgmt/administrator`, not at
-          // `access-mgmt/hid-users`.
-          //
-          // Both routes mount a roster of the reader's users, but only this one
-          // can act on them. `administrator` renders HidUserEnrollment WITHOUT
-          // `card-management`, and that prop is what gates the Enroll action:
-          //   <template v-if="!props.cardManagement" #actions>
-          // `hid-users` renders HidReaderUserRoster, which is read-only apart
-          // from PIN management. So the menu entry with this name used to lead
-          // to the screen that cannot enrol, while the screen that can was
-          // reachable only by typing the URL.
-          //
-          // `hid-users` is left in place and simply unlisted - the same state
-          // `administrator` was in - so any existing link to it still resolves.
           title: "HID Reader Users",
           route: {
-            name: "org-site-access-mgmt-administrator",
-            params: { org, site },
-          },
-        },
-        {
-          // The signed-in member's own pass, not somebody else's. Every other
-          // entry in this group acts on a resident or a visitor; this one has
-          // no subject but the caller.
-          title: "HID QR Code",
-          route: {
-            name: "org-site-access-mgmt-hid-qr-code",
+            name: "org-site-access-mgmt-hid-users",
             params: { org, site },
           },
         },

package/composables/usePeople.ts

@@ -115,24 +115,6 @@ export default function () {
     });
   }
 
-  /**
-   * The blocks, levels and units at a site that actually have an occupant.
-   * The other half of the unit picker: this narrows the cascade, then
-   * `getPeopleByUnit` answers "which person in this unit?".
-   */
-  async function getOccupiedStructure(
-    site: string,
-    { type = "", status = "active", block = "", level = "" } = {}
-  ) {
-    return await useNuxtApp().$api<Record<string, any>>(
-      `/api/people/site/${site}/occupied-structure`,
-      {
-        method: "GET",
-        query: { type, status, block, level },
-      }
-    );
-  }
-
   async function getPeopleByUnit(
     _id: string,
     { status = "active", type = "" } = {}
@@ -166,7 +148,6 @@ export default function () {
     findPersonByPlateNumberMultipleResult,
     findPersonByContact,
     getPeopleByUnit,
-    getOccupiedStructure,
     searchCompanyList,
     findUsersByPlateNumber,
     reviewResidentPerson,

package/composables/usePropertyPermission.ts

@@ -42,7 +42,6 @@ export default function usePropertyPermission() {
     siteSettingsPermissions,
   
     inventoryPermissions,
-    robotPermissions,
   } = useCommonPermissions();
 
 
@@ -580,23 +579,6 @@ export default function usePropertyPermission() {
         description:
           "Allows the user to view the list of all passes and keys on mobile. Checked by the iMA365 mobile app.",
       },
-      // DV-0396: the same three writes Security offers, enforced by API-core on
-      // /api/keys and /api/qr-code-templates for every app that calls them.
-      "add-passes-and-keys": {
-        check: true,
-        description:
-          "Allows the user to add pass templates and to create or generate passes and keys.",
-      },
-      "update-passes-and-keys": {
-        check: true,
-        description:
-          "Allows the user to edit pass templates, passes and keys, restore them, and change a pass or key back to Available.",
-      },
-      "delete-passes-and-keys": {
-        check: true,
-        description:
-          "Allows the user to delete pass templates, passes and keys.",
-      },
     },
     "online-forms": {
       "see-all-online-forms": {
@@ -619,7 +601,6 @@ export default function usePropertyPermission() {
           "Allows the user to view the list of all resident transactions on mobile. Checked by the iMA365 mobile app.",
       },
     },
-    "robot-mgmt": robotPermissions,
     "site-settings": siteSettingsPermissions
   };
 

package/composables/useRobotBuilding.ts

@@ -1,5 +1,4 @@
-import { computed, onBeforeUnmount, ref, watch, type Ref } from "vue";
-import { hasFleetRobots, isFleetBuilding } from "../utils/robot-fleet-core";
+import { computed, ref, watch, type Ref } from "vue";
 
 /**
  * One site's building for the HERO building map and lift queue: the robots
@@ -8,10 +7,6 @@ import { hasFleetRobots, isFleetBuilding } from "../utils/robot-fleet-core";
  * SITE (`/building-maps?site=`), whichever robot type it was saved from: the
  * building belongs to the site, so a map drawn in Hygiene shows in Security.
  *
- * A site with HERO Fleet Core robots draws the FLEET building instead (read
- * through from the fleet server, in the same plan frame as those robots,
- * read-only), refreshed every 5 s so doors and lifts move.
- *
  * ponytail: the first 50 robots at the site; the map read is one call.
  */
 export default function useRobotBuilding(
@@ -19,7 +14,7 @@ export default function useRobotBuilding(
   site: Ref<string>,
   type: Ref<"cleaning" | "security">,
 ) {
-  const { getSiteFleet, getSiteSummary, listSiteBuildingMaps, getBuildingMap, getFleetCoreBuilding } = useRobots();
+  const { getSiteFleet, getSiteSummary, listSiteBuildingMaps, getBuildingMap } = useRobots();
 
   /** Every robot at the site this app may see, both types where the app shows both. */
   const all = ref<Array<Record<string, any>>>([]);
@@ -32,24 +27,10 @@ export default function useRobotBuilding(
   const rows = computed(() => all.value.filter((r) => r.type === type.value));
 
   async function loadMap() {
-    if (hasFleetRobots(all.value)) {
-      const building = await getFleetCoreBuilding(site.value).catch(() => null);
-      if (building) return building;
-    }
     const newest = (await listSiteBuildingMaps(site.value, { limit: 1 }))?.items?.[0];
     return newest ? await getBuildingMap(String(newest._id)) : null;
   }
 
-  /** Live doors and lifts of the fleet building; a failed refresh keeps the last reading. */
-  const fleet = computed(() => isFleetBuilding(map.value));
-  const timer = setInterval(async () => {
-    if (!fleet.value || (typeof document !== "undefined" && document.visibilityState === "hidden")) return;
-    const mine = run;
-    const next = await getFleetCoreBuilding(site.value).catch(() => null);
-    if (next && mine === run) map.value = next;
-  }, 5000);
-  onBeforeUnmount(() => clearInterval(timer));
-
   let run = 0;
   async function load() {
     const mine = ++run;
@@ -78,5 +59,5 @@ export default function useRobotBuilding(
 
   watch([organization, site], load, { immediate: true });
 
-  return { all, rows, map, fleet, names, loading, error, reload: load };
+  return { all, rows, map, names, loading, error, reload: load };
 }

package/composables/useRobots.ts

@@ -293,18 +293,6 @@ export default function useRobots() {
     });
   }
 
-  /**
-   * The HERO Fleet Core building at a site: levels, walls, doors, lifts (in the
-   * HERO plan frame) with live door and lift states, read through from the
-   * fleet server - nothing stored. 404 where the server has no fleet.
-   */
-  function getFleetCoreBuilding(site: string) {
-    return useNuxtApp().$api<Record<string, any>>("/api/robots/fleet-core/building", {
-      method: "GET",
-      query: { site, appSlug },
-    });
-  }
-
   /* ------------------------------------------ alerts + activity log */
 
   /**
@@ -406,7 +394,6 @@ export default function useRobots() {
   return {
     listBuildingMaps,
     listSiteBuildingMaps,
-    getFleetCoreBuilding,
     getSiteFaults,
     getSiteActivity,
     getNetworkActivity,

package/composables/useSecurityPermission.ts

@@ -669,31 +669,12 @@ export default function useSecurityPermission() {
     },
     // Property's descriptions minus its "Checked by the iMA365 mobile app."
     // sentence, which is not true of this application.
-    // Add / update / delete (DV-0396), also offered by Property Management and
-    // enforced by API-core on /api/keys and /api/qr-code-templates. The security web app's
-    // Templates and Passes & Keys pages and the guard app's pass & key screen
-    // read them. See All is also what shows those two web pages.
     "passes-and-keys-mgmt": {
       "see-all-passes-and-keys": {
         check: true,
         description:
           "Allows the user to view the list of all passes and keys on mobile.",
       },
-      "add-passes-and-keys": {
-        check: true,
-        description:
-          "Allows the user to add pass templates and to create or generate passes and keys.",
-      },
-      "update-passes-and-keys": {
-        check: true,
-        description:
-          "Allows the user to edit pass templates, passes and keys, restore them, and change a pass or key back to Available.",
-      },
-      "delete-passes-and-keys": {
-        check: true,
-        description:
-          "Allows the user to delete pass templates, passes and keys.",
-      },
     },
     "resident-transactions": {
       "see-all-resident-transactions": {

package/composables/useServiceProvider.ts

@@ -58,8 +58,6 @@ export default function useServiceProvider() {
     orgId = "",
     siteId = "",
     status = "",
-    /** "engagements": also providers engaged through an accepted invitation. */
-    include = "",
   } = {}) {
     return useNuxtApp().$api<Record<string, any>>("/api/service-providers", {
       method: "GET",
@@ -71,7 +69,6 @@ export default function useServiceProvider() {
         orgId,
         siteId,
         ...(status ? { status } : {}),
-        ...(include ? { include } : {}),
       },
     });
   }

package/composables/useServiceProviderInvitation.ts

@@ -18,21 +18,6 @@ export type TServiceProviderInvitation = {
   expireAt?: string;
   deletedAt?: string | null;
   metadata?: Record<string, any>;
-  /** A lapsed "pending" reads "expired"; `status` stays the stored value. */
-  viewStatus?: string;
-  /** The company that accepted it, or the new company's name (sign-up). */
-  companyName?: string;
-  providerOrgId?: string;
-  service?: string;
-  invitedByName?: string;
-  invitedAt?: string | null;
-  /** When it was accepted, declined, cancelled or expired. */
-  answeredAt?: string | null;
-  /** Shown only once accepted. */
-  contactEmail?: string;
-  contactPhone?: string;
-  /** Accepted and still engaged on the site. */
-  onSite?: boolean;
   history?: Array<{
     action: string;
     at: string;
@@ -41,32 +26,6 @@ export type TServiceProviderInvitation = {
   }>;
 };
 
-/** One card of "Client invitations" (the service provider's side). */
-export type TReceivedServiceProviderInvitation = {
-  _id: string;
-  /** The client organisation that sent it. */
-  orgName: string;
-  siteName: string;
-  siteId?: string;
-  /** The service asked for, when the sender recorded one (e.g. "security"). */
-  service?: string;
-  invitedByName?: string;
-  createdAt?: string;
-  expireAt?: string;
-  /** When it was accepted, declined or withdrawn. */
-  answeredAt?: string | null;
-  /** pending | complete | declined | expired | cancelled */
-  status: string;
-  statusLabel: string;
-  /** The company that accepted it (whose Sites list gained the site). */
-  providerOrgId?: string;
-  providerOrgName?: string;
-  /** Accepted AND on the Sites list of the company on screen. */
-  onThisOrg?: boolean;
-  /** Accepted, but the site is on no company's Sites list: offer to add it. */
-  needsSiteLink?: boolean;
-};
-
 /** The words on screen. Kept beside the server's own list on purpose — a
  *  status the server invents must never render as a raw stored value. */
 export const SERVICE_PROVIDER_INVITE_LABELS: Record<string, string> = {
@@ -88,9 +47,7 @@ export default function useServiceProviderInvitation() {
 
   function getInvitations({
     org = "",
-    siteId = "",
     status = "",
-    search = "",
     page = 1,
     limit = 20,
   } = {}): Promise<{
@@ -100,14 +57,7 @@ export default function useServiceProviderInvitation() {
   }> {
     return useNuxtApp().$api(base, {
       method: "GET",
-      query: {
-        org,
-        status,
-        page,
-        limit,
-        ...(siteId ? { siteId } : {}),
-        ...(search ? { search } : {}),
-      },
+      query: { org, status, page, limit },
     });
   }
 
@@ -170,14 +120,8 @@ export default function useServiceProviderInvitation() {
 
   // ---- the invited service provider ----------------------------------------
 
-  function getInvitation(
-    id: string,
-    org?: string,
-  ): Promise<TReceivedServiceProviderInvitation & { tab?: string | null }> {
-    return useNuxtApp().$api(`${base}/${id}`, {
-      method: "GET",
-      query: org ? { org } : {},
-    });
+  function getInvitation(id: string): Promise<TServiceProviderInvitation> {
+    return useNuxtApp().$api(`${base}/${id}`, { method: "GET" });
   }
 
   function declineInvitation(id: string) {
@@ -186,45 +130,6 @@ export default function useServiceProviderInvitation() {
     });
   }
 
-  /**
-   * Adds the site to `org`'s Sites list - the company on screen, which the
-   * server checks the invited account belongs to.
-   */
-  function acceptInvitation(id: string, org?: string) {
-    return useNuxtApp().$api<{ message: string }>(`${base}/${id}/accept`, {
-      method: "PUT",
-      body: org ? { org } : {},
-    });
-  }
-
-  /**
-   * An accepted invitation whose site never reached this company's Sites
-   * list: add it now. Safe to repeat - the server adds it once.
-   */
-  function linkInvitationSite(id: string, org: string) {
-    return useNuxtApp().$api<{ message: string }>(`${base}/${id}/link-site`, {
-      method: "PUT",
-      body: { org },
-    });
-  }
-
-  /**
-   * "Client invitations": one tab of the invitations sent to the signed-in
-   * account, plus the count in every tab. `org` is the company on screen.
-   */
-  function getReceivedInvitations({
-    org,
-    status = "pending",
-  }: { org?: string; status?: string } = {}): Promise<{
-    items: TReceivedServiceProviderInvitation[];
-    counts?: Record<string, number>;
-  }> {
-    return useNuxtApp().$api(`${base}/received`, {
-      method: "GET",
-      query: { status, ...(org ? { org } : {}) },
-    });
-  }
-
   return {
     getInvitations,
     cancelInvitation,
@@ -236,8 +141,5 @@ export default function useServiceProviderInvitation() {
     rejectInvitation,
     getInvitation,
     declineInvitation,
-    acceptInvitation,
-    linkInvitationSite,
-    getReceivedInvitations,
   };
 }

package/composables/useSiteEntryPassSettings.ts

@@ -27,35 +27,9 @@ export default function useSiteEntryPassSettings() {
     );
   }
 
-  /**
-   * The encrypted ACM URL the access-card screens hand to API-core, which
-   * decrypts it and sends the ACM commands to that host.
-   *
-   * Resolves the site's own "Enter entrypass URL" setting first, the way
-   * `VisitorForm` does for contractor passes. The access-card forms used to
-   * call `/api/encrypt-acm-url` with no `url`, so every site's door/lift
-   * levels and access groups came from the route's hardcoded default host
-   * whatever the site had configured. A site with no URL set, or whose
-   * settings cannot be read, still gets that default.
-   */
-  async function getEncryptedAcmUrl(siteId: string): Promise<string> {
-    let rawUrl = "";
-    try {
-      const settings: any = await getBySiteId(siteId);
-      rawUrl = String(settings?.data?.settings?.url ?? "").trim();
-    } catch {
-      // No entry pass settings for this site yet - the default host applies.
-    }
-    const { encrypted } = await $fetch<{ encrypted: string }>(
-      `/api/encrypt-acm-url${rawUrl ? `?url=${encodeURIComponent(rawUrl)}` : ""}`,
-    );
-    return encrypted;
-  }
-
   return {
     getBySiteId,
     getById,
     save,
-    getEncryptedAcmUrl,
   };
 }